topic Re: VSX FW Category wise blocking was not working in Firewall and Security Management

VSX FW Category wise blocking was not working

Loveson_Fredric — Thu, 23 Mar 2023 15:56:53 GMT

We used VSX configuration. We blocked Adult category in top rule. But the adult content was not blocked.

Category wise blocking was not working in VSX. please support

Re: VSX FW Category wise blocking was not working

Chris_Atkinson — Thu, 23 Mar 2023 23:20:36 GMT

More information is needed please:

- version & jumbo

- https inspection enabled?

- browser and is QUIC traffic allowed?

If using layers & identity awareness upgrading to a newer JHF is likely recommended to avoid: sk176283

Re: VSX FW Category wise blocking was not working

Loveson_Fredric — Thu, 23 Mar 2023 17:10:25 GMT

please find the below detail.

- version & jumbo OS: R81.10 Hotfix: Check_Point_R81_10_JUMBO_HF_Take 78

- https inspection enabled? yes

- browser and is QUIC traffic allowed? we allowed Http and Https only

Re: VSX FW Category wise blocking was not working

the_rock — Thu, 23 Mar 2023 19:46:13 GMT

Hey @Loveson_Fredric

I think it would really help us if you could post a screencap of the rule involved and what is the actual site you are referencing. To verify the category, please check below, to make sure its 100% correct.

Andy

https://urlcat.checkpoint.com/urlcat/main.htm

As far as QUIC, thats mostly relevant to Google Chrome browser, but not sure if you experience same issue with all the browsers or not.

Re: VSX FW Category wise blocking was not working

Chris_Atkinson — Fri, 24 Mar 2023 08:45:51 GMT

Are you able to provide a redacted log card for the allowed traffic/connection?

Do you see any errors with HTTPS inspection, also to confirm is the trusted CA list up to date?

Is OCSP traffic allowed?